Ways to improve page rank, or deceptively get more users to your websites or away from your competition. Where you can discuss SEO (search engine optimization) issues as it relates to computer security.

What the highest PR page with XSS vulnerability you have found (PR1, 3 or 5 :-)) and what the highest PR page with XSS vulnerability which you know (PR3, 5 or 7)?

In 2007 year during my project Month of Search Engines Bugs I wrote about XSS hole at www.hotbot.com ( http://websecurity.com.ua/1002/ ) with PR8. It was a dream for SEO guys (and I made this dream came true). This was my previous record ;-).

And yesterday I presented new XSS hole at the highest PR page (and made my new record) - Cross-Site Scripting at sourceforge.net ( http://websecurity.com.ua/2800/ ) with PR9. So new dream came true.

Take a look at it ASAP, because soon I'll inform admins of sourceforge.net about the vulnerability.

I have some in google.com (PR 10) and mail.google.com (PR 9) and owasp.org (PR 7), but they're not the kind of bugs that you can use to fool a search engine.

I found one in zdnet.com (PR 8) after they 'fixed' it (it was an injection right into javascript, and they just started replacing " with \" and forgot to escape \ with \\) when it was being used for SEO purposes to spread malware on zdnetasia.com: http://ddanchev.blogspot.com/search?q=SEO+zdnet - I loled.